FortiBleed Attackers Turn Firewalls Into Credential Stealers as Heists Persist

Summary

A global campaign is actively exploiting vulnerabilities in FortiGate firewalls, turning them into credential-stealing devices. Threat actors have developed a Golang-based sniffer that targets approximately 430,000 firewalls, successfully identifying over 110 million credentials.

Indicators of Compromise

• malware — Golang-based sniffer

Entities